IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.
                
            References
                    | Link | Resource | 
|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link | 
| http://www.securityfocus.com/bid/93162 | |
| https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory | 
| http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 | Broken Link | 
| http://www.securityfocus.com/bid/93162 | |
| https://www-01.ibm.com/support/docview.wss?uid=swg21990060 | Patch Vendor Advisory | 
Configurations
                    Configuration 1 (hide)
| 
 | 
Configuration 2 (hide)
| 
 | 
History
                    21 Nov 2024, 02:55
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg1PI62375 - Broken Link | |
| References | () http://www.securityfocus.com/bid/93162 - | |
| References | () https://www-01.ibm.com/support/docview.wss?uid=swg21990060 - Patch, Vendor Advisory | 
Information
                Published : 2016-10-05 10:59
Updated : 2025-04-12 10:46
NVD link : CVE-2016-5983
Mitre link : CVE-2016-5983
CVE.ORG link : CVE-2016-5983
JSON object : View
Products Affected
                ibm
- websphere_application_server
CWE
                
                    
                        
                        CWE-284
                        
            Improper Access Control
